Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2afc5245823b4a2e05112126779653ab332c108.cer
File:                     f2afc5245823b4a2e05112126779653ab332c108.cer (raw, json)
Hash identifier:          BwdYetxCp2KWWEpGQ3TDXjoRI+thLy9ZI1TiE3/Cuco=
Subject key identifier:   1F:09:E3:2F:A9:BC:E7:1C:5D:DB:06:6E:2F:86:60:A8:96:36:4C:70
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DBF0EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/db0121d2-f5a4-4a55-816e-2195afdc54e2/f2afc5245823b4a2e05112126779653ab332c108.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/db0121d2-f5a4-4a55-816e-2195afdc54e2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 13 Jan 2023 11:53:04 +0000
Certificate not after:    Mon 10 Jun 2024 23:06:47 +0000
Subordinate resources:    AS: 265791
                          IP: 192.141.176.0/22
                          IP: 2803:4020::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14414063 (0xdbf0ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 13 11:53:04 2023 GMT
            Not After : Jun 10 23:06:47 2024 GMT
        Subject: CN=f2afc5245823b4a2e05112126779653ab332c108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:03:4b:c4:90:ee:ca:10:96:35:eb:a4:8e:4e:
                    13:07:d1:c8:fe:31:21:3a:b6:b3:c9:f4:65:2f:a4:
                    3b:dd:7d:de:90:09:d6:1d:8f:bb:69:90:9a:44:4c:
                    ee:5c:6a:5f:90:d3:f2:98:c6:b1:b1:c8:a4:f8:c0:
                    55:51:28:ee:1e:24:63:c3:0b:db:f6:d4:e0:c1:f5:
                    2b:0d:b8:5a:e5:6d:8c:ae:ab:3d:c6:60:49:75:15:
                    a8:e5:47:cd:33:df:dc:82:32:b4:6c:f8:42:1e:b9:
                    1d:2b:c6:00:5d:dd:d0:8f:5e:66:00:74:84:5e:fb:
                    73:b8:ee:52:84:8a:cb:01:3b:78:3c:19:46:2b:49:
                    4f:ed:13:13:55:61:41:ad:9b:75:a3:10:b7:91:36:
                    14:90:bf:cf:8b:90:0e:b9:8f:1e:04:28:44:8e:93:
                    b2:91:11:60:43:d2:ac:4a:74:41:a5:0a:76:38:8e:
                    08:ba:e3:21:dc:55:80:ad:da:05:15:68:28:79:77:
                    09:fa:29:f1:f0:8f:e7:28:6c:15:46:b0:f0:92:4e:
                    4a:bb:b0:b9:a6:c8:f4:af:81:74:5e:36:94:f9:5f:
                    00:e3:a0:0b:23:a9:e5:64:67:5a:78:02:85:56:eb:
                    03:ee:f4:7f:a9:79:1d:38:01:5e:7b:6f:bf:f9:2d:
                    e2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:09:E3:2F:A9:BC:E7:1C:5D:DB:06:6E:2F:86:60:A8:96:36:4C:70
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/db0121d2-f5a4-4a55-816e-2195afdc54e2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/db0121d2-f5a4-4a55-816e-2195afdc54e2/f2afc5245823b4a2e05112126779653ab332c108.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.176.0/22
                IPv6:
                  2803:4020::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265791

    Signature Algorithm: sha256WithRSAEncryption
         21:9f:95:59:32:c1:7b:cb:c1:aa:76:6f:a5:42:26:6c:cf:14:
         8b:de:81:3a:a9:e2:d7:fc:3a:9f:89:41:cd:92:2d:ef:18:57:
         cd:ed:4c:19:ad:9b:75:3b:b1:0c:04:3f:6a:72:0d:1f:cd:3e:
         cc:01:cb:8d:e2:2f:1d:09:01:a1:ed:61:89:41:13:83:ba:e9:
         f0:a1:95:95:a5:a1:16:c8:23:6a:74:e7:0e:02:d8:c2:16:39:
         57:03:d6:94:9e:e2:10:6d:68:a7:b6:72:cc:32:2d:37:05:56:
         4a:b1:ea:e3:b8:2a:51:9a:49:ad:41:b5:1a:25:75:3c:ed:e5:
         23:fa:4d:6e:cf:4f:80:23:a8:24:17:24:2b:44:5e:25:b0:08:
         02:80:4e:18:fa:67:86:44:d5:bc:31:db:8f:be:6d:e8:30:ce:
         78:28:78:b1:b8:c0:95:20:db:a7:81:2a:b9:4f:b2:eb:c5:55:
         91:3a:73:66:34:df:bd:d3:b5:fa:57:b8:c7:bf:69:45:de:af:
         9f:12:fe:81:e5:38:71:8c:9b:bc:eb:b8:84:00:49:77:13:5f:
         b7:83:69:20:4d:19:46:9c:89:6a:61:e4:73:0b:78:4e:57:b3:
         a1:7d:73:26:a7:73:74:c2:92:68:3e:e5:aa:5f:1b:c3:62:fa:
         d8:9d:e0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----